How to enable a CDN origin shield

---

Warning

Azure Media Services will be retired June 30th, 2024. For more information, see the AMS Retirement Guide.

It is best to use a Content Delivery Network (CDN) with a shielded origin to ensure that traffic for your media content is delivered efficiently. This article walks you through the steps in the Azure portal.

Note

Origin Shield is only available in the CDN Supplemental Portal for Azure CDN from Verizon Premium. To use Origin Shield for Azure CDN from Verizon Standard open a support ticket in the Azure portal.

Origin Shield configuration may not be available for older CDN profiles. If Origin Shield is not available in the portal UI, you will need to create a support ticket to have it enabled.

Prerequisites

• Read the article Scale Streaming with a CDN to understand how CDN caching works.
• Read How to enable CDN optimizations.
• A Media Services account with at least one streaming endpoint.

Determine the closest POP location

You will need to know the geographic location of the origin as you should select the closest POP location in the below configuration steps. You can look up the datacenter using this table. For example, if you chose Central US for the region of your origin, the datacenter is located in the United States, in the state of Iowa. Pick the POP location that is geographically closest to Iowa.

Enable the origin shield

The streaming endpoint must be started in order to complete the following steps.

From the streaming endpoint screen:

1. Select the new streaming endpoint from the list.
2. In the CDN card, select the CDN profile. The Profile screen will appear.
3. Select Manage. A CDN origin management page will open in a new tab or window in your browser.
4. Expand the list of origins using the down arrow to the right of the trash can icon.
5. Find the HTTPS – Edge Protocol CDN and select the right arrow to expand the origin settings
6. Select the right arrow next to the origin you want to work with. The origin editing screen will appear.
7. In Group Settings, select Origin Shield.
8. Select the Origin Shield toggle to enable the origin shield settings.
9. Select the Single POP radio button.
10. From the ALL POPs dropdown list, select a POP location near the Streaming Endpoint. For example, if the streaming endpoint is in US West 2, choose one of the Seattle POPs from the dropdown list.
11. Select Save.
12. Verify that the Origin Shield checkbox is ticked in the list of origins for both origins.

Get help and support

You can contact Media Services with questions or follow our updates by one of the following methods:

• Q & A
• Stack Overflow. Tag questions with azure-media-services.
• @MSFTAzureMedia or use @AzureSupport to request support.
• Open a support ticket through the Azure portal.